CVE-2024-53204
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 27, 2024
Updated: Jan 13, 2025
CWE ID 476
Summary
CVE-2024-53204 is a newly identified vulnerability in the Linux kernel. This issue lies in the phy driver for Realtek USB 3.0 PHYs. In the function rtk_usb3phy_probe(), devm_kzalloc() is used to allocate memory, but if it returns NULL, this value is not checked. As a result, a NULL dereference could occur, potentially leading to system crashes or even more serious consequences if exploited by an attacker. This vulnerability has been resolved in the latest Linux kernel update.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX